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PREFACE 


This manual is used during a formal five day training session. It 
describes the eight steps for developing a requirements definition 

of a computer information system. The database example is described 
in terms of URA version 3.0. Although the present version of the 
language is 3.3, the information described in this manual is upward 
compatible with 3.3. The example does not include some new reporting 
capability such as dynamic analysis, interval consistency, list 
changes, projected cost, resource consumption analysis, and security 
analysis. Refer td ESD Technical Report 78-130 and 78-131 /for des- 
cription of URL/URA-Vérsion 3.3. 
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INTRODUCT LON 


The example described in this paper was selected for use as an aid 
in training Air Force personnel in the nse of the User Requirements 
Language (URL) and User Requirements Anaiyzer (URA). It illustrates 
requirements definition for u sccurity control system. 


The purpose of the security control system is to allow users 

to access information for which they have a need and the necessary 
‘clearance, and to prevent unauthorized access. It must also allow 
security personnel to modify access privileges and to monitor system 
usage. 


The example consists of a series of URL input files. Each contains 
information to be added to the data base containing all previous input. 
In this way, an incremental build-up of the system description 

in the URA data base is obtained. 


Each input file illustrates a different aspect of the system description. 
This is useful for training purposes, but is not necessarily representative 
of the way in which a URA user would normally describe a system. In 
practice, the user should modify this scheme according to the needs of 

his own organization. 


Each input file corresponds to a portion of Section 2 in the URL User's 
Manual, as shown in Figure 1. All the URL statements for a given aspect 
are contained in a single set of input. The As-Is Source Listing 
presents the contents of the input set, as input to URA. Following each 
As-Is Source Listing are several reports illustrating ways in which the 
information which exists in the data base at that point can be presented 
and analyzed. 


In addition to the As-Is Source Listings and other reports mentioned above, 
the example contains As-Is Source Listings for input files containing syntax 
errors (pages 1-5) and reports produced as a result of URA commands 

which modify the data base (pages 207-217). 


It should be noted that URA reports can be produced with various options. 
Not all of these are illustrated in the reports in this example. A 
description of all the options is given in the URL/URA User's Manual. 


The remaining sectionsof this paper describe the various aspects of 
the example in more detail. The Appendix is the example itself, 
which consists of 223 pages of computer output. 


Figure 1 


Correspondence bctwoon URL User's Manual 
Topics and Input Files in Example 


Page numbers for 
As-Is Source Listing 


Topic in example 

1. System flow 6 

2. System properties 14-16 

3. System structure 23-26 

4. Data structure 41-54 

5. Data derivation 75-86 

6. System size 96-99 

7. System dynamics 109-112 

8. Project management 123-125 
¢ 
] 
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I. IDENTIFICATION OF URL SYNTAX ERRORS BY URA (pages 1-5 of Appendix) 


The example contains two As-Is Source Listings for URL input tiles contain- 
ing syntax crrors. ‘These .illustrate a number of errers.that are detected by 
the Analyzer. A complete list of diagnostics is given in the URA User's 
Manual. 


The URL statements in these files were input to URA using the UPDATE 
option, in order to sow sows OL Lie Crrurs which can be detected only 
by comparing input to information previously stored in the data base. 
This is not, in general, a yood practice. Instead, the NOUPDATE 
option should be used for all input files which may contain syntax 
errors, in order to avoid the necessity of removing incorrect infor- 
mation from a URA data base. Once an input file has been checked 

by using the NOUPDATE option, the errors may be corrected and it 

may then be re-input using the UPDATE option to cause the data base 

to be modified. 


II. 


SYSTEM FLOW DESCRIPTION (pages 6-13 of Appendix) 


The system flow description should define the system boundaries. 

All inputs to and outputs trom the system should be named, along 

with those people, organizations, oLter systems, etc., which are 
outside the system boundaries but which generate inputs to the system 
or receive outputs from the system. Data bases used by the system 
should also be named. Connections between the objects named as part of 
the system tlow description should be described. 


The system flow description for the Security Control System, in the 
Appendix, corresponds to the picture of the system shown in Figure 2. 
The dotted lines in the figure indicate the system houndary. 


The system flow portion of the Appendix consists of the following 
reports: 


As-is Source Listing with Cross Reference 
Name Generation 

Formatted Problem Statement 

Process Picture 

Interface Picture. 


The As-Is Source Listing shows the URL system flow description, 

as input to URA. Since the UPDATE parameter was used, this 
information was used to update a URA data base, which was initialiy 
empty. The Cross Reference shows, for cach name appearing in the 
As-Is Source Listing, the lines on which it appears. 


Name Generation was used to produce a file containing all names in 

the URA data base. These names are listed, with their types, on the 
Name Generation report. This file of names was then used to produce 

a Formatted Problem Statement showing all information in the data base. 
This differs from the URL originally input, in that all complementary 
statements are shown. 


Pictures are given to show graphically all relationships between security- 
control-system and security-control-interface and the other objects in 
the data base. 
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SYSTEM PROPERTIES DESCRIPTION (pages 14-22 of Appendix) 


The system properties description adds text descriptions and 

any synonyms desired for the objccts already defined. Keywords 

may be defined to help in the retrieval of all objects belonging 

to a given class. Memos may be used ,to make comments about certain 
groups of objects. Attributes may be used to describe additional 
properties of the objects. 


The system propertics portion of the Appendix consists of the following 
reports: 


As-Is Source Listing 

Name Generation 

Formatted Problem Statement 

Name List. 

x 

The As-Is Source Listing shows the URL description of system properties, 
as input to URA. This information was used to update the data base 
which existed after the system flow description was complete. 


Name Generation was used to produce a file containing all names in the 
updated data base. This file was used to generate a Formatted Problem 
Statement showing all the information now in the data base. 


The Name List report shows the type and synonyms for each name in the 
data base. 


IV. 


SYSTEM STRUCTURE DESCRIPTION (pages 23-40 of Appendix) 


The system structure description breaks the processing down 
into its major functions, and describes each of these with 
respect to system flow and system properties. Further infor- 
mation is given about data objects and their decomposition. 


The system structure description for the example provides a good 
deal more detail about the security control system. This second- 
level description corresponds to the diagram in Figure 3. The 
names at the top and bottom of the diagram indicate the corres- 
pondence between Figure 2 (the top-level diagram) and Figure 3. 


The following reports comprise the system structure portion of 
the Appendix: 


As-Is Source Listing 

Data Base Summary 

Process Structure 

Interface Structure 

Input Structure 

Output Structure 

Name Generation 

Formatted Problem Statement 
Name Generation 

Process Picture 


The URL system structure description, as input to URA, is shown 
in the As-Is Source Listing. This information is added to the 
data base, which already contains the system flow and system 
properties descriptions. 


The data base summary shows, for each type of name in the data base, 
the following: 


Number of names 

Number of names having synonyms 
Percentage of names having synonyms 
Number of names having descriptions 
Percentage of names having descriptions. 


This is useful in evaluating the size and completeness of the 
data base. 


Structure reports for the PROCESS security-control-system, the 
INTERFACE security-control-interface and the INPUT security-control- 
input show, in each case, how an object which is part of the top- 
level description of the problem is broken down into level-two 
objects. 
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i Name Generation is used to obtain all SET names from the data 
base, in order to obtain a Formatted Problem Statement for them. 


Name Generation is used again to generate all PROCESSES, for 
use as input to the Picture report. The Picture reports for 
the PROCESSES now show both data flow information and structure 
information (PART, SUBPARTS). 
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DATA STRUCTURE DESCRIPTION (pages 41-74 of Appendix) 


Each data base, input, or output belonging to the security control 
system must be described in more detail. Each is decomposed, through 
as many levels as necessary, into ELEMENTS. All resulting names are 
given descriptions and synonyms as necessary: Ali relationships 
between the objects are defined. The result is the data structure 
description of the system. 


The data structure section in the Appendix consists of the following: 


As-Is Source Listing 

Data Base Summary 

Name Generation 

Contents with Index 

Name Generation 

Consists Comparison 

Name Generation 

Identifier Information 
Name Generation 

Formatted Problem Statement 


The As-Is Source Listing shows the data structure description for the 
security control system. The information is added to the data base, 
and the Data Base Summary report is produced to give a current picture 
of the size and composition of the data base. 


Name Generation is used several times to select all names of a given 
type for the Contents, Consists Comparison, Identifier Information, 
and Formatted Problem Statement reports. The use of Name Generation 
to produce input for another report should, by this time, need no 
further explanation. 


The Contents report is produced for all OUTPUTS, to show the breakdown 
for each OUTPUT, stated via the CONTAINS statement. 


An Index was produced for the Contents report to show, for each name 
appearing in the report, the pages on which it was used. This feature 
is available for many other reports. 


The Consists Comparison report was produced for all INPUTS in the data 
base. To produce the report, a matrix is constructed having one 

row for each INPUT. Each ELEMENT which is CONTAINED in one or more of 
these INPUTS, cither directly or several levels down, will have a 
column in the matrix. (Any GROUPS which appear at the lowest level 
will be treated in the same way as ELEMENTS.) As asterisk in the 

(I, J) entry of the matrix indicates that the ELEMENT represented by 
column J is contained, directly or indirectly, in the INPUT represented 
by row I. In the second matrix, each INPUT corresponds to one row and 
one column. The entry in position (I, I) gives the number of ELEMENTS 
in the INPUT corresponding to I. The (I, J) entry gives the number of 
elements in common between INPUTS I and J. This matrix is analyzed to 
determine, for cach pair (I, J) of INPUTS, whether I is a subset of J 
(i.e., each ELEMENT contained in I is also contained in J), and whether 
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RN I and J are equivalent (i.c., consist of the samc 3LEMENTS). This infor- 
mation can then be used by the analyst to determire whether the data 
base contains multiple iiaies for a single INPUT, and whether sowe TNPUTS 
should be SUBPARTS of others. The same report could be produced using 
SET, OUTPUT, ENTITY, and GROUP names, as well as INPUT names. 


The Identifier Information report was produced for all the ENTITIES in 
the data base. That report consists of a matrix connecting ENTITIES 
and ELEMENTS which IDENTIFY them, followed by counts for the number of 
ENTITIES IDENTIFIED by each ELEMENT and the number of ELEMENTS which 
IDENTIFY each ENTITY. 


A Formatted Problem Statement follows which shows all the information 
in the data base for each RELATION. 
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VI. DATA DERIVATION DESCRIPTION (pages 75-95 of Appendix) 


Tne data derivation descrin:ion contains a much more detailed breakdown 
of the PROCESSES, and shows the ways in which various PROCESSES interact 
with data described in the data structure description to produce outputs. 


This section of the Appendix shows the following: 


As-Is Source Listing 

Data Base Summary 

Name Generation 

Data Process Report 
‘ Extended Picture 


The URL input to describe data derivation is shown in the As-Is Source 
Listing. Once again, the data base is updated and the Data Base Summary 
report used to show the increase in available information. 


The Data Process Report was produced with input consisting of all 

ELEMENTS in the data base. The result is a matrix showing the PROCESSES 
which USE or DERIVE each ELEMENT. The matrix is then used to find ELEMENTS 
which do not interact with any PROCESS and PROCESSES that have no inputs 
and/or outputs among the ELEMENTS. The Process Interaction Matrix is used 
to find PROCESSES with no predecessors and/or successors. The same report 
could be produced using any collection of SET, INPUT, OUTPUT, ENTITY, GROUP, 


and ELEMENT names. 


The Extended Picture report was used to show data flow beginning at a 
specified PROCESS. Thus it shows all successors (direct or indirect) for 
that PROCESS, and all data objects used to determine predecessor-successor 


relationships. 
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VII. SYSTEM SIZE DESCRIPTION (pages 96-108 of Appe..dix) 


A number of components of a system require size and volume description. 

. For example, the freauency with which a PROCESS is performed, the 
values of an ELEMENT, and the size of a SET must all be described in 
this way. These, and similar information, are included in the system 
size description. 


The following reports are included in this section of the Appendix: 


As-Is Source Listing 

Data Base Summary 

Name Generation 

Formatted Problem Statement 
Name Generation 

Formatted Problem Statement 
Frequency Report 


ee a ee eee ee 


The As-Is Source Listing shows the URL input of system size information 
for our security control system example. The reader should note the use 
of SYSTEM-PARAMETERS to describe many quantifiable aspects of the system. 
A named SYSTEM-PARAMETER is essentially a variable representing some j 
quantity which will be defined numerically later in the system design 

process, or which may vary. 


Once again, the information shown in the As-Is Source Listing is added : 
to the URA data base. The Data Base Summary reflects the continued 
growth of the data base. 


Formatted Problem Statements are given for all SYSTEM-PARAMETERS and for 
all INTERVALS. 


The Frequency Report shows, for a given INTERVAL, all objects which occur 
some number of times within that INTERVAL, along with the SYSTEM-PARAMETERS 
or integers which describe the frequency within the INTERVAL. 
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VIII. SYSTEM DYNAMICS DESCRIPTION (pages 109-122 of Appendix) 


The system dynamics description deals with those aspects of the 
system which change over time. This includes EVENTS (which occur 

at instants of time), CONDITIONS (whose values may change over time), 
VOLATILITY (changeability) of ENTITIES and SETS, and the TRIGGERING 
of PROCESSES. 


The following reports are included in the system dynamics section of the 
Appendix: 


As-Is Source Listing 

Data Base Summary 

Process Chain 

Name Generation 

Formatted Problem Statement 
Name Generation 

Formatted Problem Statement 


The URL system dynamics description is shown in the As-Is Source Listing. 
This URL was input and stored in the data base, after which a Data Base 
Summary was run to indicate changes in the amount of information in the 
data base. 


The Process Chain report shows the sequence of PROCESSES and EVENTS that 
occur as a result of the specified EVENT. 


Formatted Problem Statements show all information in the data base related 
to all EVENTS and CONDITIONS in the data base. 


IX. 


PROJECT MANAGEMENT DESCRIPTION (pages 1 3-135 of Apnendix) 


The project management description includes information on the pecple 
describing the system, and those portions of the system which each 
described, security intormation for the system description, sources 
of information, and any related memos. 


This section of the Appendix contains the following: 


As-Is Source Listing 

Data Base Summary 

Name Generation 

Formatted Problem Statement 
Name Generation 

Dictionary Report 

Name Generation 

Punched Comment Entries. 


The As-Is Source Listing shows project management information added to 
the data base. The Data Base Summary reflects the final state of the 
data base, now that the security control] system has been described. 


Name Generation is used to obtain all MAILBOX, MEMO, and PROBLEM-DEFINER 
names from the data base, in order to produce a Formatted Problem State- 
ment. The reader should especially note the use of OR in the SELECTION 
parameter for Name Generation. 


Name Generation is also used to obtain all URL objects described by the 
PROBLEM-DEFINER james-m-amster. The Dictionary Report then gives descrip- 
tion, synonym, keyword, and responsible problem definer for each of these. 


The descriptions for all MEMOS inthe data base were punched. The Punched 
Comment Entries report shows the information that is contained in the 
resulting file. The process of punching comment entries is useful in 
correcting errors in comment entries, as will be demonstrated later in 
this paper. ‘ 
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X. ADDITIONAL REPORT EXAMPLES (pages 136-206 of Appendix) 


The following additional report examples make use of the information 
in the complete Security Control System data base: 


Name List 

Name Generation 

Attribute Report 

Process Structure 

Name Generation 

Formatted Problem Statement 
Output Structure 

Name Generation 

Formatted Problem Statement 
Input Structure 

Name Generation 

Formatted Problem Statement 
Interface Structure 

Name Generation 

Formatted Problem Statement 
Name Generation 

Formatted Problem Statement 
Name Generation 

Formatted Problem Statement 
Kwic Index 

Consists Matrix Report 
Process Input/Output 


The Name List report lists all names in the data base, along with 
their types and synonyms. 


Name Generation was used to generate all ATTRIBUTE names from the 
data base. The Attribute Report then shows, for each of these, those 
names which it APPLIES TO and the corresponding ATTRIBUTE-VALUES. 


The following reports were obtained for all PROCESSES, OUTPUTS, INPUTS, 
and INTERFACES: 


Structure 
Name Generation 
Formatted Problem Statement. 


The reader should particularly note that all objects which are not part 
of larger objects appear at level one. This is useful in identifying 
names which have not yet been put into their proper places in the overall 
structure. 


Formatted Problem Statements were also produced for all ENTITIES, ELEMENTS, 
and GROUPS in the system description. 


The Kwic (Keyword in context) index is helpful in locating the names used 
to describe particular aspects of the target system and in identifying 
multiple names used to describe the same object. 


oy 


The Consists Matrix shows, for each GROUP or ELEMENT, the GROUPS, ENTITIES, 
INPUTS, and OUTPUTS which CONTAIN it. This information is used to obtain 
counts of the number of objects which CONTAIN each GROUP or ELEMENT, and 
the number of GROUPS or ELEMENTS CONTAINED in each GROUP, ENTITY, INPUT, 
or OUTPUT. ENTITY, INPUT, and OUTPUT names may also be used as input to 
the Consists Matrix report. 

The Process Input/Output report gives the DESCRIPTION and a full list 

of inputs and outputs for each PROCESS used as input to the command. 
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XI. TECHNIQUES FOR .ODIFYING A URA DATA BASE (pages 207-217 of Appendix) 


The following reports demonstrate various techniques for making modifica- 
tions to the data base: 


Change-Type Report 

Rename Report 

Deleted Comment Entries 
Deletion 

Replaced Comment Entries 
Deleted URL 

Formatted Problem Statement 


Change-Type may be used to modify the type of a name that is already in 
the data base. 


Rename may be used in a similar fashion to change a name. The new name 
must not, however, appear in the data base prior to the name change. 


Delete-Comment-Entry may be used to remove specified comment-entries 
from the data base. 


Replace-Comment-Entry replaces comment-entries currently in the data base 
with new ones. The reader should note that there is no way to edit 
comment-entries while they are a part of the data base; they may be 
altered only by replacement. Thus we can see the usefulness of Punch 
Comment Entry. It may be used to obtain a file of comment-entries for 
editing by the computer system editor. The edited comment-entries may 
then be re-input via Replace-Comment-Entry. 


Delete-URL removes all relationships indicated in the URL used as input 


to the command. This is a "reversing" of the Input-URL process which adds 
information to the data base. 


A Formatted Problem Statement is used to show the results of making the 
indicated changes to the security control system data base. 


* 
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ADDITIONAL EXAMPLES OF NEW NAME GENERATION FACILITY (pages 218-223 of Appendix) 


Prior to July 1976, the Name Generation facility supplied with URA 
selected names such that each name satisfied one of the type para- 
meters plus all of the additional selection parameters, such as SUB- 
PARTS-OF, KEY, and PD. 


URA 3.0 allows more flexibility in specifying combinations of conditions 
for Name Generation. Legal values for the SELECTION parameter are 
discussed in the URA User's Manual. The examples in the Appendix 
illustrate some of the possibilities. 


A. SELECTION='KEY=level-2 AND PROCESS' generates all PROCESSES 
appearing at the second level. 


B. SELECTION=' (NOT PROCESS) * KEY=level-2' generates all second 
level names except PROCESSES. 


C. SELECTION='ATTR=occurrences unscheduled ANI) SO=security- 
control-input' chooses all subparts of security-control- 
input having unscheduled arrival times. 


D. SELECTION=' (INPUT OR OUTPUT) * ATTR=specder,implicit' selects 
all implicitly derived inputs and outputs. 


Es SELECTION='SO=security-control-input OR SO=security-control - 
output' generates all subparts of ecither the input or the output 
specified. 
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PREFACE 


This Arrendix consists of User Reauirements Analyzer (URA) 
rerorts for @ security control sustem example. The example was 
designed for use in a five day course on the User Reauirements 
Landuage (URL) and User Reauirements Analyzer. 


Because this outrut was intended for training purrosesy it may 
not be useful by itself. The body of Working Parer No. 156 
contains a descrirtion and short explanations of the material in 
the Arrendix. Students in the URL/URA course will receive more 
detailed instruction in its use. 


Cee Ce 
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{ WRA Report bade 
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AS-TS SONRCF LISTING (for System Flow errors) 1 
AS-IS SOURCE LISTING (for System Properties errors) 3 
AS-IS SO'URCF LISTING (for System Flow) 5 
CROSS REPFRPNCE (for above) 7 
| NAME GENTRATION (for all names) 8 
| PORMATTED PPOBLEM STATEMENT 9 


) PICTURE (for security-cont rol-systen) 19 
PICTURE (for security-control-intercfacea) 12 
AS-IS SOURCE LISTING (for System Properties) 14 
NAME GENERATION (for all names) 17 
PORMATTED PROBLEM STATEMFNT 18 
NAME LIST 22 
AS-IS SONRC® LISTING (for System Structure) 23 
DATA BASE STIMMARY 27 
STROUCTURE (for PRICTSSFS) 238 
STRUCTIRE (for INT FRFACFS) 29 
STRUCTHRFE (for INPNTS) 349 
STRUCTURE (for ONTPYTS) 31 
NAME GENERATION (for SET names) 32 
FORMATTED PROSLEM STATEMENT 28 
NAME GENERATION (for PROCESS names) a5 
PICTURES 6 
AS-IS SOURC® LISTING (for Data Structure) 41 
DATA BASE SUMMARY 55 
NAME GENERATION (for ONTPUT names) 56 
CONTENTS REPORT S57 
INDFX (to CONTENTS REPORT) 69 
NAME GENFRATION (for INPUT names) 42 
CONSTSTS COMPARISION REPORT 43 
NAME GPNFRATION (for FNTITY names) 49 
IDENTIFISR INFORMATION REPORT 79 
NAME GENERATION (for RFLATION names) 7? 
FORMATTED PRORLEM STATEMENT 73 
AS-IS SONRCF LISTING (for Nata Derivation) 75 
DATA BASE SIMMARY RT 
NAMF GENERATION (for EL®MFNT names) 83 
DATA PROCESS REPORT 89 
EXTENDED PICTURE (for create-access-re lation) 94 
AS-IS SOTRCE LISTING (for System Size) 96 
DNATA BAS® SUMMARY 199 
NAMPF GENERATION (for SYSTEM-PARAMETERS) ge 
FORMATTED PROBLEM STATEMENT 102 
NAME GENERATION (for INTERVAL names) 195 
PORMATTED PROBLEM STATEMENT 196 
FRFOUFNCY REPORT 198 
AS-IS SONRCF LISTING (for System Dynamics) 1°9 
DATA BASE SIMMARY 113 
PROCESS THAIN (foc occur-release-usaqe-attr-027) 114 
NAMF GENFRATION (for EVENT names) 117 
PORMATTED PROALFM STATEMENT 118 
NAME GENFRATION (for CONDITION names) 121 
PORMATTED PROBLEM STATEMENT 12? 
AS-IS SONRCE LISTING (for Project Managenent) 123 
DATA BASE SUMMARY 126 


NAME GENFRATION (for MFMO,MATLSOX and PROBSLEM-OFPINER) 127 


POIRMATTED PROBLEM STATEMENT 

NAMP GENERATION (for PD=james-m-amster) 
DICTIONARY REPORT 

NAMP® GENFRATION (for YFMO names) 
PUNCHED COMMFNT ENTRIFS 

NAMF LIST ORDFER=RYTYPF 

NAME GSENFRATYION (for ATTRIBUTE names) 
ATTRIBUT? REPIRT 

STRUCTURE (for PROCESSFS) 

NAME GENERATION (for PROCESSFS) 
FORMATTFD PRORLFM STATEMEN™ 
STRICTURE (foc ONT PITS) 

NAMF GENFRATION (for OUTPINTS) 
FOPMATTRED PRORLEM STATFMENT 
STRICTURE (for INPUTS) 

NAME GENERATION (for INPNTS) 
PIRMATTED PROBLEM STATEMENT 
STRUCTURS (for INTFRFAC®S) 

NAME GENFRATION (for INTFRRFACES) 
PORMATTEN PROBLEM STATEMENT 
NAME GFNERATION (for ®NTITIES) 
FORMATTED PROBLEM STATEMENT 
NAMF GFNERATION (for GROUPS and ELEMENTS) 
FORMATTED PROSLEM STATEMENT 

KWIC INDEX 

CONSTSTS MATRIX PFPORT 

PROCESS INPNT/ONTPNT (for delete-ohbject) 
CHANGE TYPF RF POR™ 

RENAMF REPORT 

DFPLETED COMMENT ENTRIFS 

DELETION 

RF PLACRD COMMPNT ENTRIFS 

DELETED ORT 

FOPMATTFED PRORLEM STATFMEN™ 


NAME GENSRATION (for level 2 PROCFSS names) 
NAME GENFRATION (for level 2 non PROCESS names) 
NAME GENERATION (for unscheiuled subparts of 


security-control-input) 


NAME GBNERATIIN (for INPUT or OUTPUT names whose 
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spacification-derivation is implicit) 
NAME GENERATION (for subparts of security-control-inpat 


9r security-control-output) 
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Security-control-exanple 


he = rs Ss 8 0 2 6. F bis T2896 


LINe STAT ID PIELD 

**#*e* Security-control-inout 
LEV®L 2,MRA2902:NLIST : NAME PRYVIONSLY USED DIFFERENTLY - TGNORED os 
LAST PRROR OCCURRED ON LINF 12 
14 > : 
15 > SET: security-control-iata-hase; 
16 > 

$ 

eee LEVEL FT, NRAND3S NLEY : EOP NOT FOUND BEFORE END-OF-FILE : ess 

LAST FRROR OCCUPRED ON LINE 13 


en ane ae 7 = i a. Seen —— ower 
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Security-control-example 


a a2 2 S$ SO: FR CFE Ls 2 2 8G 
PARAMETERS PIR: SYN 


SONkCS NOXREP UPDATE OBREF 


29 
30 


recori of outputs produced, etc. ; 


LIWE STN'T TD FIELD 
1 > /* SCS system properti2s */ 
2 > 
3 > PROCESS: security-cortrol-systen; 
f 4 > SYNONYM: S2S, Scsys: 
5 > DESCRIPTIIANS : 
{ > The svsten will provide a means to allow users to pro< >cess 
7> information concurrently whil> providing 
8 > reasonable assurance that no unauthorized release 9f 
3 > information shall take place. The security featur2s must 
yy > be an integral part of the operating syste1n. The 
11 > contractor can assure that the ohvsical installation 
12 > will b2 secured to the highest level of information in 
13 > the system. ; 
Ww> 
15 > INPNT: securit v-control-inout; 
14 > SYNONYM: scinp; 
17 > DESCRIPTION 
18 > The input to the security control system 
% 
**ee LEVEL 2,NRAN11:STACK : TLLFEFGAL SYMBOL PAI? - SYNTAX =RROR - STAPL SKIPPING 
19 > consists of requ2sts by users tod access ani 
8 molify information in the system and of conmanis 
PAN OP hy secirity personnel to monitor the systen. ; 
$ 
eee LEVEL 1, 9RAO203 RECOV : LAST STATEMENT SKIPPED 
LAST ERROR OCCURRED ON LINF 18 
22 > 
23 > INTPUT: securit y-control-output; 
24 > SYNONYM: SSoOues 
25 > DFSCRIPTIIN: 
24 > Tae systen will produce outputs of several 
27 > differant types: approvals to lata access dr modification 
28 > requests, audit trails on security features, a 
> 
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